yichen-agent-memory
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone the repository from
https://github.com/mcncarl/agent-memory-vault.gitto the local environment.\n- [REMOTE_CODE_EXECUTION]: The skill executes Python scripts downloaded from the external repository, such asscripts/install-posix.py, to perform installation and configuration tasks.\n- [COMMAND_EXECUTION]: Various local commands are used, includingpython3for script execution,gitfor repository management, and a custommemoryctltool for interacting with the vault.\n- [PERSISTENCE]: The skill contains instructions to create macOSLaunchAgentsor WindowsTask Schedulertasks for automated memory maintenance, which allows for persistent background execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes Markdown files that may contain instructions targeting the agent.\n - Ingestion points: External data is read into the agent context through the
memoryctl searchandretrievecommands from the vault files as described in references/daily-reads.md.\n - Boundary markers: The skill uses stdin JSON and schema versioning for structured data passing, but does not implement explicit delimiters to isolate retrieved memory content from agent instructions.\n
- Capability inventory: The system is capable of executing local Python scripts, writing to the file system, and establishing persistent tasks.\n
- Sanitization: Safety rules in SKILL.md and leak-checking procedures in references/template-development.md are used to prevent sensitive data exposure, but do not specifically sanitize against prompt injection.
Audit Metadata